Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e31362e302f32322d3234203d3e2039333431.roa
File:                     3132312e3130302e31362e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier:          Qj0kRHAE2WttWMy/jNWeCdutjn6d8WxGkN3uXUKAIh8=
Subject key identifier:   97:AA:B3:FD:A6:12:3A:88:C0:B4:32:AF:E0:43:E6:40:33:8E:74:57
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       6C2BBBD295D6DC543C0DFC5DC03648336C93575D
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e31362e302f32322d3234203d3e2039333431.roa
Signing time:             Tue 25 Mar 2025 04:00:01 +0000
ROA not before:           Tue 25 Mar 2025 03:55:01 +0000
ROA not after:            Tue 24 Mar 2026 04:00:01 +0000
asID:                     9341
IP address blocks:        121.100.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 03:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2b:bb:d2:95:d6:dc:54:3c:0d:fc:5d:c0:36:48:33:6c:93:57:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Mar 25 03:55:01 2025 GMT
            Not After : Mar 24 04:00:01 2026 GMT
        Subject: CN=97AAB3FDA6123A88C0B432AFE043E640338E7457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:35:06:de:03:8c:9b:a8:93:fe:67:45:8f:6a:
                    f3:0a:5c:d5:e9:4b:d0:75:6b:87:90:ab:1a:4c:62:
                    53:db:d6:4b:0d:d5:0b:53:4d:de:fb:3b:52:60:f9:
                    0a:bc:f8:3e:4b:ec:b5:7b:3f:7d:ab:32:02:69:86:
                    c6:c6:27:0d:c2:ec:9d:a4:20:4a:3b:f7:4c:09:db:
                    6b:64:2d:33:60:a8:79:df:79:c7:66:e7:53:d3:9e:
                    5b:b3:09:98:6b:f5:a7:87:96:d7:85:db:e5:1f:08:
                    c5:d0:d2:5c:2a:41:a5:2c:e2:ae:ae:78:c1:07:a5:
                    1c:93:31:b1:78:2d:7b:b3:24:05:c6:74:de:d0:c8:
                    15:74:ca:e6:81:b5:cb:c1:65:28:ac:f0:a7:ef:f9:
                    8d:12:19:08:a0:70:69:ae:8c:7d:6d:86:bf:56:92:
                    7d:59:24:53:f2:93:40:bc:24:f7:e3:16:c0:d8:ca:
                    d6:7e:da:81:d7:bb:36:57:9b:b2:ac:3c:57:bc:1d:
                    90:bd:9a:7a:61:dd:1d:47:ef:59:3d:07:59:31:14:
                    7d:57:5e:be:7b:ba:73:2e:75:d9:7e:10:9b:fa:9d:
                    f7:1e:0b:6a:33:e1:8c:64:15:cf:ea:89:23:b3:a1:
                    87:95:66:be:a0:7b:36:7b:1a:84:d4:9a:4d:ca:28:
                    ec:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AA:B3:FD:A6:12:3A:88:C0:B4:32:AF:E0:43:E6:40:33:8E:74:57
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e31362e302f32322d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.100.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:45:fb:42:38:c0:06:41:27:2d:2a:a5:7d:40:b1:12:03:20:
         bc:cc:e5:8c:8c:f1:63:a1:00:57:b3:43:09:ec:5a:36:43:3d:
         ea:8c:b0:7e:ef:19:6a:52:0d:61:8a:73:b9:3f:ca:da:63:f8:
         46:8a:cd:4f:c4:1f:c0:71:7f:ea:b8:8c:5a:c0:2b:03:97:58:
         5d:fd:43:32:dd:47:11:93:ed:e4:f1:b9:60:91:0d:2a:b1:36:
         3a:b2:46:a6:9e:77:3c:d3:91:10:ed:cf:dc:45:fe:9b:44:f0:
         df:2a:c8:c7:24:3d:f7:c6:d5:e0:5e:c9:df:85:20:53:ed:4c:
         1f:f0:8d:b9:d0:43:8f:46:7a:ff:de:56:48:41:93:7e:4f:04:
         29:ad:43:b7:da:3c:0a:7a:6e:85:33:34:ad:a1:7f:40:d2:be:
         23:82:d1:cf:8e:2e:41:76:7b:41:db:e8:da:4f:c7:18:9e:0f:
         36:2e:99:4a:fc:03:d5:df:38:fb:d6:8c:5a:12:5b:bd:e7:67:
         f4:fd:d9:85:f5:55:41:ae:83:b3:99:e5:31:46:a3:e0:71:fe:
         18:c7:60:90:5c:86:84:c6:ed:c6:20:57:6e:fe:83:77:70:aa:
         14:c4:54:df:30:ec:1b:6f:06:96:d3:cf:73:77:68:18:3f:b9:
         4f:5e:5a:91
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUbCu70pXW3FQ8DfxdwDZIM2yTV10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNTAzMjUwMzU1MDFaFw0yNjAzMjQwNDAwMDFaMDMxMTAvBgNV
BAMTKDk3QUFCM0ZEQTYxMjNBODhDMEI0MzJBRkUwNDNFNjQwMzM4RTc0NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbNQbeA4ybqJP+Z0WPavMKXNXp
S9B1a4eQqxpMYlPb1ksN1QtTTd77O1Jg+Qq8+D5L7LV7P32rMgJphsbGJw3C7J2k
IEo790wJ22tkLTNgqHnfecdm51PTnluzCZhr9aeHlteF2+UfCMXQ0lwqQaUs4q6u
eMEHpRyTMbF4LXuzJAXGdN7QyBV0yuaBtcvBZSis8Kfv+Y0SGQigcGmujH1thr9W
kn1ZJFPyk0C8JPfjFsDYytZ+2oHXuzZXm7KsPFe8HZC9mnph3R1H71k9B1kxFH1X
Xr57unMuddl+EJv6nfceC2oz4YxkFc/qiSOzoYeVZr6gezZ7GoTUmk3KKOxJAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUl6qz/aYSOojAtDKv4EPmQDOOdFcwHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04
YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzIzMTJlMzEzMDMwMmUzMTM2MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ5ZBAwDQYJKoZIhvcN
AQELBQADggEBAFxF+0I4wAZBJy0qpX1AsRIDILzM5YyM8WOhAFezQwnsWjZDPeqM
sH7vGWpSDWGKc7k/ytpj+EaKzU/EH8Bxf+q4jFrAKwOXWF39QzLdRxGT7eTxuWCR
DSqxNjqyRqaedzzTkRDtz9xF/ptE8N8qyMckPffG1eBeyd+FIFPtTB/wjbnQQ49G
ev/eVkhBk35PBCmtQ7faPAp6boUzNK2hf0DSviOC0c+OLkF2e0Hb6NpPxxieDzYu
mUr8A9XfOPvWjFoSW73nZ/T92YX1VUGug7OZ5TFGo+Bx/hjHYJBchoTG7cYgV27+
g3dwqhTEVN8w7BtvBpbTz3N3aBg/uU9eWpE=
-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:38 2025 by rpki-client on console.sobornost.net